Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/8C7D2730687F11F181765BB26747A888.roa
File:                     8C7D2730687F11F181765BB26747A888.roa (raw, json)
Hash identifier:          kFIovixd7sOPjgNTic6Nb0nHzIt+OjJSbtTQAE2k2P4=
Subject key identifier:   1C:8E:6A:0D:0D:D1:88:A5:84:A7:7A:D6:28:B1:C4:CA:6F:21:5A:4F
Certificate issuer:       /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial:       023A
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/8C7D2730687F11F181765BB26747A888.roa
Signing time:             Mon 15 Jun 2026 06:00:45 +0000
ROA not before:           Mon 15 Jun 2026 06:00:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153911
IP address blocks:        103.245.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
                          rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jun 2026 02:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
        Validity
            Not Before: Jun 15 06:00:45 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a2f950d-33ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:0c:ef:68:45:6f:6f:25:a9:65:d2:db:c9:
                    0c:50:fa:fc:d8:63:c7:96:b5:c5:70:59:1f:81:fc:
                    53:40:00:38:e6:9d:e6:cb:e9:fd:31:e1:43:6b:a6:
                    b5:18:cb:b2:70:6a:f1:73:28:df:79:13:c5:fd:c5:
                    f2:27:be:8c:cc:a9:73:80:78:1e:80:8e:0f:56:d0:
                    54:16:39:ea:41:55:b4:0d:94:b3:23:28:50:b9:98:
                    0f:d2:bc:55:c6:03:a7:29:d5:75:a8:da:31:2d:17:
                    8c:13:2a:70:d6:5a:4b:cd:a5:79:e2:2a:ac:64:5c:
                    35:11:e0:df:66:c3:02:ce:4f:dd:9a:2a:ca:a3:58:
                    59:e5:1d:3e:1f:84:7b:8d:59:3d:31:e4:27:f5:d0:
                    98:28:0c:45:a5:72:b7:39:14:1d:6b:de:19:cd:78:
                    0c:9c:eb:94:b7:7f:04:e3:df:e1:47:ca:91:2d:51:
                    a5:e1:a3:73:20:4e:7d:68:7b:bb:3c:4f:41:fb:a7:
                    22:a6:eb:ac:25:34:79:f7:32:6c:43:3c:21:d7:94:
                    59:f5:a5:df:65:42:ca:d5:f7:07:a4:2f:d0:44:34:
                    f4:90:b5:1a:44:fd:7e:84:b6:f6:57:6b:16:54:a1:
                    a3:b5:8f:d3:73:9d:df:a8:c3:f8:eb:98:0d:ca:e2:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8E:6A:0D:0D:D1:88:A5:84:A7:7A:D6:28:B1:C4:CA:6F:21:5A:4F
            X509v3 Authority Key Identifier:
                keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/8C7D2730687F11F181765BB26747A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:c2:9f:23:94:2f:fa:5e:0e:7c:13:a2:74:42:27:4f:82:bc:
         73:6c:f7:b7:d2:80:3f:e6:8a:f5:c7:d6:58:f3:47:1f:e1:3e:
         34:93:63:d6:9f:e9:69:19:e7:c0:87:9a:c3:49:60:e1:03:e5:
         9c:0e:47:23:eb:74:63:9f:09:0b:c8:47:28:02:7c:a7:15:0f:
         21:a4:00:44:c7:bc:57:5c:39:81:ee:e5:cd:93:44:e9:99:0a:
         1f:bc:f4:f8:5b:2d:14:8c:de:2d:60:76:4d:61:35:79:d3:a5:
         1e:f0:d0:b6:7b:33:c7:fc:77:5c:67:e4:48:62:18:8d:71:4f:
         da:b8:d9:1a:61:3c:80:e4:de:df:7e:44:63:b9:b4:61:ae:a3:
         f2:03:d1:85:90:5c:8b:6f:d0:78:9c:c9:8c:75:77:bb:3f:28:
         ce:e6:20:ca:3a:f6:9f:44:97:97:00:ef:62:c9:aa:81:92:54:
         80:65:bb:7e:e4:25:c6:dc:9b:0c:c6:78:a6:f7:42:ef:7e:83:
         53:c4:e1:07:61:fa:c3:5c:1e:b0:c5:4c:28:02:ba:d4:4d:e4:
         d6:d7:4b:d0:a3:d2:77:8f:95:26:a5:f8:93:dc:6c:cd:7b:ba:
         19:97:29:5b:b8:0b:d4:d2:28:05:53:24:b3:b1:26:7f:ef:7e:
         e3:1e:ab:75
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy
MTA0Q0I3QTgwHhcNMjYwNjE1MDYwMDQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJmOTUwZC0zM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthoM72hFb28lqWXS28kMUPr82GPHlrXFcFkfgfxTQAA45p3my+n9MeFDa6a1
GMuycGrxcyjfeRPF/cXyJ76MzKlzgHgegI4PVtBUFjnqQVW0DZSzIyhQuZgP0rxV
xgOnKdV1qNoxLReMEypw1lpLzaV54iqsZFw1EeDfZsMCzk/dmirKo1hZ5R0+H4R7
jVk9MeQn9dCYKAxFpXK3ORQda94ZzXgMnOuUt38E49/hR8qRLVGl4aNzIE59aHu7
PE9B+6cipuusJTR59zJsQzwh15RZ9aXfZULK1fcHpC/QRDT0kLUaRP1+hLb2V2sW
VKGjtY/Tc53fqMP465gNyuLlNwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFByOag0N
0YilhKd61iixxMpvIVpPMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG
NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUUwOTkvMDIyMUQ3Q0UyRjY3MTFFRTgyNEFEQzU5QzRGOUFFMDIvOEM3RDI3MzA2
ODdGMTFGMTgxNzY1QkIyNjc0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ/UYMA0GCSqGSIb3DQEBCwUAA4IBAQA1wp8jlC/6Xg58E6J0QidP
grxzbPe30oA/5or1x9ZY80cf4T40k2PWn+lpGefAh5rDSWDhA+WcDkcj63RjnwkL
yEcoAnynFQ8hpABEx7xXXDmB7uXNk0TpmQofvPT4Wy0UjN4tYHZNYTV506Ue8NC2
ezPH/HdcZ+RIYhiNcU/auNkaYTyA5N7ffkRjubRhrqPyA9GFkFyLb9B4nMmMdXe7
PyjO5iDKOvafRJeXAO9iyaqBklSAZbt+5CXG3JsMxnim90LvfoNTxOEHYfrDXB6w
xUwoArrUTeTW10vQo9J3j5UmpfiT3GzNe7oZlylbuAvU0igFUySzsSZ/737jHqt1
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:59:41 2026 by rpki-client